About

An attacker gains access through a trusted supplier. Your team detects suspicious activity, but the extent of the compromise is still unclear. Isolating affected systems could stop a critical service. Keeping them connected could allow the attack to spread. And the business needs a decision before you have all the facts.

The options available depend on what has been protected, tested and agreed beforehand, and on whether people know who is allowed to make which call. Recovery priorities need to reflect what the business can tolerate, and supplier assurances need to translate into workable arrangements. But as platforms, automation and external dependencies expand, our exposure can change faster than our defences and recovery capabilities.

Where could an attack cause the greatest harm, and what evidence shows we could contain it? Which level of disruption has the business explicitly accepted, and does our recovery capability match that decision? Where should the next investment go: prevention, detection, response or recovery? And which dependencies, including those on a few key people, need an alternative, or stronger safeguards where switching is not realistic?

CYBERFEST will connect today's assessment of cyber risk with tomorrow's technology, sourcing and investment choices. We'll examine how leaders decide what to protect, what risk to accept and how to sustain critical operations, and the teams running them, while recovering safely. The ability to honour commitments under pressure starts with knowing which commitments your organisation can actually support.

Register for CIONET Belgium's CYBERFEST to test the assumptions behind your resilience priorities.